PT-2005-3027 · Inframail · Inframail Advantage Server Edition

Reed Arvin · Publicado 2005-06-30 · Atualizado 2016-10-18 · CVE-2005-2085

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Inframail Advantage Server Edition versions 6.0 through 6.7

Description: The issue allows remote attackers to cause a denial of service, resulting in a process crash. This can be achieved via a long SMTP FROM field or possibly an FTP NLST command.

Recommendations: For versions 6.0 through 6.7, consider restricting access to the SMTP and FTP services until a fix is available. As a temporary workaround, limit the length of the SMTP FROM field to prevent buffer overflow. Additionally, restrict the use of the FTP NLST command to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-2085

Produtos afetados

Inframail Advantage Server Edition

Referências · 4

• 🔥 https://exploit-db.com/exploits/1166 · Exploit
• 🔥 https://exploit-db.com/exploits/1165 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2085 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111998161006731&w=2 · Nota